{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "phishing", "trigger": true, "arguments": ["trusted entity", "attacker", "victim", "purpose", "time"]}, {"event_type": "ransom", "trigger": true, "arguments": ["tool", "price", "place", "time", "victim", "damage amount", "attack pattern", "payment method", "attacker"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["vulnerability", "common vulnerabilities and exposures", "discoverer", "vulnerable system version", "vulnerable system", "vulnerable system owner", "supported platform", "capabilities", "time"]}, {"event_type": "data breach", "trigger": true, "arguments": ["time", "victim", "compromised data", "number of data", "attacker", "attack pattern", "place", "tool", "number of victim"]}, {"event_type": "patch vulnerability", "trigger": true, "arguments": ["supported platform", "patch number", "vulnerability", "vulnerable system version", "vulnerable system", "issues addressed"]}], "input": "Colorado security officials are still investigating the CDOT ransomware attack that took 2,000 employee computers offline for more than a week ."}
{"phishing": [], "ransom": [{"trigger": "ransomware attack", "arguments": {"tool": "NAN", "price": "NAN", "place": "NAN", "time": "a week", "victim": "CDOT", "damage amount": "NAN", "attack pattern": "took 2,000 employee computers offline", "payment method": "NAN", "attacker": "NAN"}}], "discover vulnerability": [], "data breach": [], "patch vulnerability": []}